An authorization protocol like OAuth. By means of e-mail, people can contact the service provider too. Similar tools include mobile phones, accounts on Facebook/Google/Twitter/etc. but many will also require us to provide an e-mail address for password recovery.